🐸 Versioned release

CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## 1.0.0
+<sub>2026-06-17</sub>
+
+-  *(major)* - Initial release 🐣
+  `fledgling` claims your npm package names and sets up token-less (OIDC) trusted publishing — for a single package or a whole monorepo.
+  - **Claim names** by publishing a minimal `package.json`-only placeholder, so you can configure trusted publishing before your first real release
+  - **Set up trusted publishing** via npm's own `npm trust` (OIDC) — no `NPM_TOKEN`, no clicking through the npm website
+  - **GitHub, GitLab, and CircleCI** providers, supporting every option `npm trust` accepts
+  - **Monorepo-aware** — npm / yarn / bun `workspaces` and pnpm, plus single-package repos; target packages by name or glob
+  - **Interactive wizard** (powered by clack), with `add`, `sync`, and `init` subcommands; goes non-interactive with `--yes` or in CI
+  - **`fledgling sync`** reconciles trusted publishing across every package against your config, showing the exact drift before fixing it
+  - **2FA handled by npm itself** — an interactive browser approval (cached ~5 min) covers a whole run; pass `--otp`, or `--otp-secret` / `$FLEDGLING_OTP_SECRET` (a TOTP secret or `otpauth://` URI) for non-interactive use
+  - **Exclude packages** from fledgling with a `fledgling.ignore` list (names or globs), beyond `"private": true`
+  - **Idempotent** — re-run any time you add a package; it only does what's missing
+  - **Configurable** via a `fledgling` block in `package.json`, with CLI flags as per-run overrides
+  - **Shell completions** for zsh, bash, and fish
+  - **`--dry-run`** to preview the plan without changing anything

package.json

@@ -1,6 +1,6 @@
 {
   "name": "fledgling",
-  "version": "0.0.0",
+  "version": "1.0.0",
   "description": "🐣 Hatch your new npm package safely - claim the name on npm and set up / sync trusted publishing settings, for one package or a whole monorepo.",
   "keywords": [
     "npm",